Controller and scope
FinTrackX is operated by TechRex, a sole proprietorship of Gummadi Ramesh Babu based in Pandalapaka, Andhra Pradesh, India, acting as data controller for account-level data and, where FinTrackX is deployed for a lending organisation, as data processor for that organisation's customer records. This policy covers the FinTrackX web application, its marketing pages under techrex.in, and support communication sent to support@techrex.in.
Information we collect
We collect (a) account information you or your organisation provide to create a user — name, work email, phone number, assigned branch and role; (b) authentication data such as password hashes and session tokens; (c) operational records you enter into FinTrackX in the course of your work — customer names, KYC identifiers, contact details, addresses, loan amounts, disbursement and repayment history, collection entries, expense entries, notes and audit-trail metadata (who did what, when); and (d) technical telemetry such as IP address, browser and device, and application error logs used for security and diagnostics.
How we use it
Account and operational data is used to provide the FinTrackX service to you and your organisation: authenticating users, enforcing role- and branch-level access, recording and reporting loan and collection activity, generating exports and dashboards, sending service and security notifications, and preventing fraud or abuse. Technical telemetry is used to keep the service secure, available and reliable. FinTrackX does not currently show advertising and does not use customer data for advertising or profiling.
Legal bases (GDPR / UK GDPR)
Where GDPR applies, our legal bases are: performance of a contract with your organisation, our and your organisation's legitimate interests in operating and securing the lending workflow, and compliance with legal obligations (for example, financial record-keeping and audit requirements imposed on the lending organisation).
Role of the deploying organisation
Where FinTrackX is used by a lending organisation, that organisation is the controller of the customer records processed through it and is responsible for the lawful basis for collecting, storing and acting on those records, for obtaining any required consents from its own customers, and for responding to data-subject requests from its own customers. TechRex processes that data only on the organisation's instructions as reflected in the product's access controls and any separate agreement.
Sub-processors
FinTrackX relies on standard cloud infrastructure providers for hosting, database storage, backups, transactional email and error logging. Each sub-processor processes data strictly to deliver the service to us and is bound by confidentiality and data-protection obligations. A current list of sub-processors is available on request from support@techrex.in.
Retention
Operational records (loans, collections, expenses, audit entries) are retained for as long as the deploying organisation's account is active, plus a further period reasonably required for financial record-keeping, audit or legal-hold purposes. Authentication logs are retained on a shorter rolling window sized for security investigations. On written request from the deploying organisation, we will export and then delete or irreversibly anonymise the organisation's data within a reasonable period, subject to legal-hold obligations.
Security
We protect FinTrackX with HTTPS in transit, encrypted storage at rest at the infrastructure layer, hashed passwords, role- and branch-level access enforcement, session controls and application logging. Access to production systems is limited to authorised personnel on a need-to-know basis. Users must keep their own credentials confidential and report suspected compromise to support@techrex.in immediately.
Your rights
Subject to applicable law (including the DPDP Act 2023, GDPR / UK GDPR, and CCPA / CPRA), you may request access to, correction, deletion, restriction of processing, or portability of the personal data we hold about you as an individual user, and you may object to certain processing or lodge a complaint with your data-protection authority. Where the personal data belongs to a customer of a deploying lending organisation, direct your request to that organisation, and we will support them in fulfilling it.
International transfers
FinTrackX data is processed in India and, depending on the infrastructure provider used, may be transferred to and stored in other countries. Where such transfers are made from the EEA, UK or another region that requires a transfer mechanism, we rely on the recipient country's adequacy status or on the European Commission's Standard Contractual Clauses.
Changes and contact
We will update this policy as FinTrackX evolves. Material changes are indicated by the "Last updated" date at the top of the page. For privacy questions, right-exercise requests or complaints regarding FinTrackX, contact support@techrex.in. Postal address: TechRex, Pandalapaka, Andhra Pradesh, India.